m m 



-22- 

Having thus described the preferred embodiments, 
the invention is now claimed to be: 

1. A method for conducting a CQjtumercial 
transaction carried out over the Internet, s^d method 
comprising: 

(a) synchronizing a token with a/ periodically 
5 changing non-predictable code; 

(b) providing an account holder^ with the token, 
said token displaying the periodica^y changing non- 
predictable code; 

(c) receiving a code commyffiicated by a buyer in 
10 the commercial transaction; and, 

(d) comparing the received code with the 
periodically changing non-predictable code to authenticate 
the buyer as the account holder when the received code 
matches the periodically changing non-predictable code. 



2. The method Recording to claim 1, said method 
comprising: 

in step (a) , fiirther providing the account holder 
with a unique user namc^ such that the periodically changing 
5 non-predictable code Ls associated with the unique user name; 

in step /(b) , further receiving a user name 
communicated by thef buyer; and, 

wherein/ in step (c) , the received code 
communicated by /the buyer is compared to the periodically 
10 changing non-pr4dictable code associated with the received 
user name communicated by the buyer • 

3/ The method according to claim 1, said method 
further cgrnprising: 

;e) authorizing completion of the commercial 
transact^ion when the buyer has been authenticated as the 
accounf^ holder ; and , 

/ (f) denying authorization for completion of the 
commercial transaction when the buyer has not been 
authenticated as the account holder. 
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4. The method according to claim 1, whereinr in 
step (b) an amount for the commercial transaction is/ also 
received, and said method further comprises: 

(e) regardless of authentication, /denying 
authorization to complete the commercial transaction/ when the 
amount for the commercial transaction exceeds a /threshold; 
and, 

(f) authorizing completion of th^^ commercial 
transaction when the amount for the commercial /transaction is 
less than or equal to the threshold and th^ buyer has been 
authenticated as the account holder* 



5. The method according to/claim 4, wherein the 
threshold represents an amount selected from a group 
consisting of funds on deposit for the account holder and 
credit available to the account holder. 
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6. A method of" carrying out commercial 
transactions, said method comprising: 

(a) generating A number of separate periodically 
changing non-predictable/ codes ; 

(b) assignipig unique user names to a number of 
account holders, each/user name being associated with one of 
the separate periodically changing non-predictable codes; 

(c) pr>6viding the account holders with tokens, 
each token being synchronized with step (a) to generate the 
same separator periodically changing non-predictable code 
associated with the unique user name assigned to the account 
holder be^g provided the token; 

(d) receiving codes along with user names 
commur^icated by buyers involved in commercial transactions; 
and^ 

(e) for each set of received codes and user names, 
the buyer as the account holder having the 

corresponding user name when the received code matches the 
periodically changing non-predictable code for the user name 
communicated. 



luthenticating 
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7. The method according to claim 6, whereioi each 
separate periodically changing non-predictable cc^e is a 
sting of alpha-numeric characters. 



7, w^ie: 



8. The method according to claim 7, ^herein there 
are at least 6 alpha-numeric characters in each string. 

9. The method according to cla^ 6, said method 
further comprising: 

displaying in a human-viewable format the 
periodically changing non-predictable ^odes generated by each 
5 token . 

10. The method according to claim 9, wherein the 
periodically changing non-predictable codes generated by each 
token is displayed on the token itself. 

11. The method a^ccording to claim 9, said method 
further comprising: 

indicating an aiiount of time remaining until a next 
change of the periodically changing non-predictable codes. 

12. The /method according to claim 6, said method 
further comprisiitg: 

(f) /authorizing completion of the commercial 
transactions/ in which the buyer involved has been 
5 authenticated . 

13. The method according to claim 6, wherein the 
commercial transactions are carried out over the Internet. 

14. The method according to claim 12, said method 
irther comprising : 

selecting a number of merchants doing business on 
the Internet; and, 
5 providing the selected merchants with transaction 

pbjects to be load onto Internet connected servers, said 
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servers being used to carry out commercial transections 
between the merchants and the buyers over the Internet; 

wherein said transaction objects are acc/essed by 
10 the buyers when communicating the codes and the xj^ser names 
such that in step (d) the codes along with the use;if names are 
received. 
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15. A method of conducting comnjercial Internet 
transactions, said method comprising: 

(a) selecting merchants as designated sellers for 
buyers to perform commercial transacticms with; 

(b) providing the sel^ted merchants with 
transaction objects to be installed! on Internet connected 
servers, said servers being us^ed to. perform coxnmercial 
transactions between the merchapxs and buyers ; 

(c) providing accouiKt holders with user names and 
10 tokens, said tokens generatiing periodically changing non- 
predictable codes associated with the user names of the 
account holders to which t?ne tokens were provided; 

(d) remotely /generating the same periodically 
changing non-predictab/e codes associated with each user 

15 name; 

(e) receiving sets of information associated with 
the commercial Internet transactions due to buyers accessing 
the transaction objects of selected merchants, each set of 
information including a pass code, and a user name; and, 

20 (f) /authenticating each buyer as the account 

holder having the received user name when the received pass 
code matches the remotely generated periodically changing 
non-predictable code for that user name. 




16. The method according to claim 15, wherein when 
the g4t of information received includes a user name that has 
not' been provided to any account holder, authentication is 
lenied. 



17. The method according to claim 15, said method 
further comprising: 
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prior to step (c) , obtaining personal inf oir^f^iation 
about each account holder; and, 

after step (t) , communicating to merchants the 
personal information of account holders corresponding to 
authenticated buyers. 



18. The method according to claim /17, wherein for 
each account holder the obtained per^nal information 
includes an account holder address. 



19. A method of processing/commercial transactions 
_ carried out over the Internet betyeen account holders and 

participating merchants, said methofd comprising the steps of: 
.p (a) receiving a purchase request of a buyer from 

5 a participating merchant indicating that the buyer desires to 
fij carry out a transaction with/che merchant, said transaction 

including the buyer purcha;sing one or more selected items 
from the merchant t / 
O (b) authenticating the buyer as an account holder; 

10 (c) establi/shing transaction fulfillment data, 

Q said transaction fuTlfillment data indicating a delivery 

y destination for the selected items; 

(d) c^immunicating the transaction fulfillment data 
to the participi^ting merchant; 
15 (e/ ^^ceiving transaction details from the 

participatix^ merchant, said transaction details including a 
cost for /the selected items; 

/ (f) authorizing completion of the transaction and 
establishing an authorization code therefor; and, 
2 0 / (g) communicating the authorization code for the 

transaction to the participating merchant. 



L 20. The method according to claim 19, wherein 

authenticating the buyer as an account holder includes using 
at least one factor authentication. 
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21, The method according to claim 19, wherein 
authenticating the buyer as an account holder includes using^ 
biometr ic authentication . 



22. The method according to claim 19, whereirr the 
cost of the selected items is the total price of the selected 
items including tax and shipping costs. / 

23. The method according to claim 1/9, wherein 
establishing the transaction fulfillment data includes: 

using a previously obtained destination as the 
delivery destination for the selected items/ 

24. The method according to/claim 23, wherein 
establishing the fulfillment data furthfer includes: 

obtaining an alternate destination from the buyer, 
said alternate destination being different from the 
5 previously obtained destination; / 

transmitting a security question to the buyer; 
receiving a response jio the security question from 
the buyer; and, / 

using the alternate destination as the delivery 
10 destination for the selected items when the response to the 
security question is accurate. 

25. They^ethod according to claim 19, wherein the 
delivery destina^on is a non-identifying destination such 
that anonymity pt the buyer is maintained with respect to the 
participating^ merchant. 

/2 6. The method according to claim 19, wherein said 
method /further includes obtaining restriction instructions 
from au3Count holders. 

/ 27. The method according to claim 26, wherein said 

restriction instructions block authorizing the completion of 
/transactions with participating merchants identified in the 
/ restriction instructions. 
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28. The method according to claim 26, wherein saj 
restriction instructions block authorizing the completion/ of 
recurring transactions which are not separately participated 
in by the account holder from whom the restriction 

5 instructions were obtained, 

29. The method according to claimXi^, wherein 
authorizing completion of the transaction inclAides comparing 
the cost of the selected items to a thresjifbld such that if 
the cost is less than or equal to the threshold authorization 

5 is given and if the cost if greater/ than the threshold 
authorization is denied. 

30. The method accordipg to claim 29, wherein the 
threshold represents an amoufit selected from a group 
consisting of funds on depoi^t for the account holder and 
credit available to the acQOunt holder. 
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31. The mettvSd according to claim 19, wherein 
authorizing completion/bf the transaction and establishing an 
authorization code tnerefor includes: 

transmi-tKing the transaction details of the 
authenticated acjcount holder directly to a funding source 
which determine^ if the account holder has one of sufficient 
funds on deposit with the funding source or sufficient credit 
available through the funding source to cover the cost of the 
selected itlems; and, 

receiving the authorization code from the funding 

source . 



32. The method according to claim 19, wherein said 
method further comprises the steps of: 

(h) obtaining settlement information from the 
/articipating merchant, said settlement information including 
5 /the authorization code and transaction details for the 
completed transaction; 
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(i) confirming that the transaction details 
corresponding to the authorization code received with th^e 
settlement information are within a desired tolerance; and, 

(j) communicating the confirmed settlement 
information directly to a funding source which reimburses the 
participating merchant for the cost of the selected/item and 
bills the account holder. 



33. The method according to claim/ 32, wherein 
obtaining the settlement information includes^ automatically 
capturing the settlement information from the participating 
merchant upon an indication of deliver^ of the selected 

5 items . 

34. The method according t,^ claim 19, wherein step 
(b) precedes step (a) . 
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35. The method according to claim 19, wherein 
authenticating the buyer as ap account holder includes: 

synchronizing a t^Ken with a periodically changing 
non-predictable code; 

providing they4ccount holder with the token, said 
token displaying the periodically changing non-predictable 
code; 

receiving a code communicated by the buyer; and, 
comparing the received code with the periodically 
changing non-p4redictable code to authenticate the buyer as 
the account/ holder when the received code matches the 
periodically changing non-predictable code. 




